VMware NSX — Claude Code MCP server: 33 tools for NSX networking
Lets an agent read and change NSX segments, Tier-0 and Tier-1 gateways, NAT rules, routes and IP pools without opening NSX Manager in a browser.
claude mcp add --env VMWARE_NSX_CONFIG=<VMWARE_NSX_CONFIG> --transport stdio vmware-nsx -- uvx vmware-nsx-mgmtWhat VMware NSX does
The server talks to the NSX Policy API and targets NSX-T 3.0+ along with NSX 4.x. It ships 33 tools: segments, gateways and their BGP neighbors, NAT, static routes, IP pools, fabric inventory, alarms, and two lookups for tracing a VM to its segment and checking port state. Thirteen of the tools write; the other twenty only read.
You need NSX Manager credentials before anything runs. Put the config at ~/.vmware-nsx/config.yaml and the password in ~/.vmware-nsx/.env as VMWARE_NSX_NSX_PROD_PASSWORD. Then vmware-nsx doctor tells you whether the connection works. Every write command takes --dry-run, and skipping it is how a wrong subnet prefix or overlay zone path ends up on a live segment.
A VMware engineer maintains this, and the repo says plainly that it is not an official vendor product. Microsegmentation with DFW, security groups and Traceflow live in vmware-nsx-security; load balancing through AVI is in vmware-avi. The author points to vmware-aiops as the entry package for the wider family.
What it helps with
- stand up a segment and Tier-1 gateway for a new app
- add an SNAT rule for a subnet and confirm it
- find which segment a VM sits on by its display name
- check port realization and transport node state on a segment
- pull high-severity alarms from NSX Manager
Example prompts for the agent
- Create a segment called
app-web-segin the overlay zone and show me the result - Check BGP neighbors on
tier0-gwand the state of the edge clusters - Which segment does VM
web-01use, and are its ports realized?
How to install VMware NSX
Platform CLI
claude mcp add --env VMWARE_NSX_CONFIG=<VMWARE_NSX_CONFIG> --transport stdio vmware-nsx -- uvx vmware-nsx-mgmtReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vmware-nsx-mgmt <command>
Platform CLI
codex mcp add vmware-nsx --env VMWARE_NSX_CONFIG=<VMWARE_NSX_CONFIG> -- uvx vmware-nsx-mgmtReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vmware-nsx-mgmt <command>
Config file
{
"mcpServers": {
"vmware-nsx": {
"command": "uvx",
"args": [
"vmware-nsx-mgmt"
],
"env": {
"VMWARE_NSX_CONFIG": "<VMWARE_NSX_CONFIG>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vmware-nsx-mgmt <command>
Config file
{
"servers": {
"vmware-nsx": {
"type": "stdio",
"command": "uvx",
"args": [
"vmware-nsx-mgmt"
],
"env": {
"VMWARE_NSX_CONFIG": "<VMWARE_NSX_CONFIG>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vmware-nsx-mgmt <command>
Platform CLI
gemini mcp add -e VMWARE_NSX_CONFIG=<VMWARE_NSX_CONFIG> vmware-nsx uvx vmware-nsx-mgmtReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vmware-nsx-mgmt <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about VMware NSX
How do I install VMware NSX in Claude Code?
Run claude mcp add vmware-nsx -- uvx vmware-nsx-mgmt. To point it at a config outside the default location, use claude mcp add --env VMWARE_NSX_CONFIG=<VMWARE_NSX_CONFIG> --transport stdio vmware-nsx -- uvx vmware-nsx-mgmt.
What does VMware NSX do?
It gives an agent tools against the NSX Policy API: list and create segments, gateways, NAT rules, static routes and IP pools, plus read alarms and fabric health.
How is it different from vmware-nsx-security?
This package covers segments, routing, NAT and IPAM. DFW microsegmentation, security groups and Traceflow are a separate package, vmware-nsx-security.
